Lesson 7

Which asset-management activity ensures that a firewall’s entry in the CMDB still matches its actual firmware and rule-set version?

• Change approval workflow

• Configuration baseline validation

• License reconciliation

• Barcode auditing

A backup scheme that keeps one full backup and then copies only blocks that changed since the previous backup is called:

• Synthetic full backup

• Differential backup

• Incremental-forever chain

• Continuous data protection

You need to prevent malicious insiders from tailgating into a secure lab but still allow carts of equipment through. The BEST physical control is a:

• Bar-metal gate

• Man-guarded turnstile

• Two-door mantrap vestibule

• Razor-wire perimeter fence

In a closed-circuit alarm, the siren will trigger when the circuit becomes .

• Grounded

• Open
• Pressurized

• Over-volted

Which term describes the time a business can survive a system outage before significant harm occurs?

• Recovery Time Objective (RTO)

• Maximum Service Gap (MSG)

• Maximum Tolerable Downtime (MTD)

• Recovery Point Objective (RPO)

When evaluating vendors for asset procurement, which factor MOST helps avoid lock-in?

• Annual maintenance discount

• Standards-based API support

• Bundled training vouchers

• Low-cost proprietary connectors

A datacenter UPS mainly exists to:

• Provide load balancing for servers

• Keep HVAC fans spinning indefinitely

• Bridge the gap until generators start

• Encrypt power-bus telemetry

Which backup technology stores only unique chunks across many servers to reduce total storage consumed?

• Snapshot chaining

• Data deduplication

• Striped mirror RAID

• WORM tape rotation

A warm-site DR facility typically contains:

• Nothing but powered cooling systems

• Fully populated servers with live data

• Installed hardware that needs data restoration

• Only desks and cabling infrastructure

What is the PRIMARY goal of defense-in-depth?

• Reduce licensing costs for a single vendor

• Accelerate user logon times

• Provide multiple overlapping security layers

• Guarantee zero downtime during upgrades